VDB
BDU%3A2026-01635
BDU%3A2026-01635
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость анализатора XML-файлов Xerces2 Java, связанная с ошибками управления ресурсом, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, IBM Corp., Oracle Corp., Google Inc | Xerces2 Java, IBM Java, Java SE, Jrockit, Java SE Embedded, Android Studio |
Timeline
- Feb 11, 2026 CVE Published
References
- https://lists.apache.org/thread.html/49dc6702104a86ecbb40292dcd329ce9ae4c32b74733199ecab14a73%40%3Cj-users.xerces.apache.org%3E url
- http://www-01.ibm.com/support/docview.wss?uid=swg21657539 url
- http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_July_2013 url
- https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21653371 url
- https://issues.apache.org/jira/browse/XERCESJ-1679 advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC98015 advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21644197 advisory
- https://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html advisory